EUVD-2003-1091

Malware in sbrugna...

CVE-2022-50549: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix ABBA deadlock between shrinkslab and dmpoolabortmetadata Following concurrent processes: P1drop cache P2kworker dropcachessysctlhandler dropslab shrinkslab downread&shrinkerrwsem - LOCK A doshrinkslab supercachescan...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-400773)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-400773 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bi...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414446)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414446 advisory. Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root...

CVE-2022-50534: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm thin: Use last transaction's pmd-root when commit failed Recently we found a softlock up problem in dm thin pool btree lookup code due to corrupted metadata: Kernel panic - not syncing: softlockup: hung tasks CPU: 7 PID: 26692...

PT-2025-41039

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the dm thin pool btree lookup code that can lead to a softlockup. This issue arises from corrupted metadata, potentially causing an infinite loop...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987314)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987314 advisory. In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign newroot only when removal succeeds removeraw in dmbtreeremove may fail du...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-426304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-426304 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986338 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and wil...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986309)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986309 advisory. In the Linux kernel, the following vulnerability has been resolved: dm btree remove: assign newroot only when removal succeeds removeraw in dmbtreeremove may fail du...

dm-stripe: fix a possible integer overflow

...

SUSE CVE-2023-53604

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

SUSE CVE-2025-39940

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's a possible integer overflow in stripeiohints if we have too large chunk size. Test if the overflow happened, and if it did, don't set limits-iomin and limits-ioopt;...

CVE-2022-50496

In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy Dmcache also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in destroy...

UBUNTU-CVE-2023-53604

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

CVE-2023-53604

CVE-2023-53604: In the Linux kernel, the dm_integrity component may leak journal_io_cache if dm_register_target() fails due to an error path that calls kmem_cache_destroy() in dm_integrity_init(). This root cause is documented in the initial report as a resolution for the leak in journal_io_cache...

CVE-2023-53604 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

CVE-2023-53604 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path

In the Linux kernel, the following vulnerability has been resolved: dm integrity: call kmemcachedestroy in dmintegrityinit error path Otherwise the journaliocache will leak if dmregistertarget fails...

CVE-2022-50496 dm cache: Fix UAF in destroy()

In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy Dmcache also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in destroy...

CVE-2022-50496 dm cache: Fix UAF in destroy()

In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy Dmcache also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in destroy...